From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 13 Nov 2026 09:41:25 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xRmqa-00AMU1-2p for lore@lore.pengutronix.de; Fri, 13 Nov 2026 09:41:25 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xRmqX-0006Q3-Kg; Fri, 13 Nov 2026 09:41:21 +0100 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xRmol-0006Ns-Iw for ptxdist@pengutronix.de; Fri, 13 Nov 2026 09:39:33 +0100 Received: from dude05.red.stw.pengutronix.de (dude05.red.stw.4.pengutronix.de [10.17.1.19]) (Authenticated sender: relay-from-dude05.red.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 8503E205848; Fri, 13 Nov 2026 09:39:31 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1794559171; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ZfGu9f4H8Crh5Io5fkdvCYdLLug61J3u8enncLvknQI=; b=e/6APU9S6ieA9drcoWwTlxpURXyEs344gQUBFIUNIrxnYffH6omfvjpkZM5ArfOlwzmSrE KlfWYKqQchwf4dYMrAdPgnwRjt0Cz94vuD/ltcFa5AWedB9hjJPkrG4EFskH3S/DXTWYVP VyrIlKVuL/Jwom1Qi2wRE9FrRJ7p0tc1jHw2ZPI4sb47Y3CUlRTXHx2ucmWa3pC4eVowaH Ej+TZWidvwIWNbfzdqTg51x1qd0FOe42APyeCEhbq8+LrLBevxrxrfKzYifJiVB9YdJnOD 5W6jOkeKMEN3BwjlxbKDNoWhqR64bn9T99gmXQS5CfiO9zh63+8JpmDalq5zzA== ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1794559171; a=rsa-sha256; cv=none; b=Qsw4sYK3Vd7CNukohn2nPLGtsg3jO5dPr3GtRGbh0OZcqk5peSudDjrdTom/1fymtusjzJ Fp/HS01G4Z2K4Jd8m/6v8CO3p061rgDtPd+HV1El/vHsK4y9z+7D5jzfyx/05w0TnlECPf X9lU7+RMkU7RF5oKdHB+ovqgjzII3eSZrINlodgfIMxhhQGDPQUYNkgj7sC3TpIdm76eva KUwD1gCklZ0VqG7JkZAtkT3wdhXoWmw59hEoZR2OXrGSTgDZTwN48vQChevK4aCKrZpGu4 mluRYy/XoamqMoI0f3A38eKP99XTsmUTQncqiXFGZa8IoiWfAlY9EDV2WOoNKA== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-dude05.red.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de Received: by dude05.red.stw.pengutronix.de (Postfix, from userid 1014) id 7677F743103; Fri, 13 Nov 2026 09:39:31 +0100 (CET) From: Michael Olbrich To: ptxdist@pengutronix.de Date: Fri, 13 Nov 2026 09:39:31 +0100 Message-ID: <20261113083931.1380763-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261031122359.1518714-1-christian.melki@t2data.com> References: <20261031122359.1518714-1-christian.melki@t2data.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.0 required=5.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [APPLIED] libjpeg: Version bump. 3.2.0 -> 3.2.1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Christian Melki Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as 21548aa94f4ecdd78f6a48f881277c11249ddfda. Michael [sent from post-receive hook] On Fri, 13 Nov 2026 09:39:31 +0100, Christian Melki wrote: > Mostly fixes. > https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/3.2.1 > > Plugs CVE: > CVE-2026-75466: integer division-by-zero vulnerability in the PNG loader > > Signed-off-by: Christian Melki > Message-Id: <20261031122359.1518714-1-christian.melki@t2data.com> > Signed-off-by: Michael Olbrich > > diff --git a/rules/libjpeg.make b/rules/libjpeg.make > index ac06d7ee3fc2..042f07e75bda 100644 > --- a/rules/libjpeg.make > +++ b/rules/libjpeg.make > @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBJPEG) += libjpeg > # > # Paths and names > # > -LIBJPEG_VERSION := 3.2.0 > -LIBJPEG_SHA256 := 980dd81f425082aa6d7c9e47fef27554ce7a9ffc8e2f6e863b97d263c5c50858 > +LIBJPEG_VERSION := 3.2.1 > +LIBJPEG_SHA256 := 6f5819c51649bce2571a23b1b0cd41eae2f57fc3f8908c7ec9e7047efb65ca13 > LIBJPEG_SUFFIX := tar.gz > LIBJPEG := libjpeg-turbo-$(LIBJPEG_VERSION) > LIBJPEG_URL := https://github.com/libjpeg-turbo/libjpeg-turbo/archive/refs/tags/$(LIBJPEG_VERSION).$(LIBJPEG_SUFFIX)